CVE-2008-2349: Zomp Zomplog

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direct request to install/newuser.php with the admin parameter set to 1.

Affected products

• Zomp Zomplog: up to and including 3.8.2

Published 2008-05-20. Last modified 2026-06-16.